CVE-2022-4828 Bold Timeline Lite < 1.1.5 - Contributor+ Stored XSS via Shortcode

The Bold Timeline Lite WordPress plugin before 1.1.5 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high...

Ubuntu: Security Advisory (USN-4828-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WordPress Bold Timeline Lite Plugin < 1.1.5 is vulnerable to Cross Site Scripting (XSS)

Software Bold Timeline Lite Type Plugin Vulnerable versions 1.1.5 Fixed in 1.1.5 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-4828 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 0317e30acfa3 Credits István Márton...

Security Bulletin: Multiple security vulnerabilities in QRadar, QRM, QVM (CVE-2014-0837, CVE-2014-4833, CVE2014-4830, CVE-2014-4827, CVE-2014-4828, CVE-2014-4825)

Summary Multiple security vulnerabilities have been discovered in IBM QRadar, IBM QRadar Vulnerability Manager QVM and IBM QRadar Risk Manager QRM. Vulnerability Details CVE ID: CVE-2014-0837 DESCRIPTION: IBM QRadar is vulnerable due incorrect handing of an SSL connection, caused by the autoupdat...

CVE-2020-4828

IBM API Connect CVE-2020-4828 affects IBM API Connect 10.0.0.0–10.0.1.0 and 2018.4.1.0–2018.4.1.13, vulnerable to web cache poisoning due to improper input validation when HTTP request headers are modified. Root cause: input validation weakness in header handling. Impact: web cache poisoning pote...

Security Bulletin: IBM API Connect is vulnerable to web cache poisoning (CVE-2020-4828)

Summary IBM API Connect has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2020-4828 DESCRIPTION: IBM API Connect is vulnerable to web cache poisoning, caused by improper input validation by modifying HTTP request headers. CVSS Base score: 6.5 CVSS Temporal Score: See:...

CVE-2019-4828

...

CVE-2019-4828

CVE-2019-4828 is rejected/not used and does not represent an active vulnerability entry.

CVE-2017-4828

CVE-2017-4828 is rejected/not used per the initial description.

24tv.ua Open Redirect vulnerability

Vulnerable URL: http://24tv.ua/home//changeLanguage.do?lang=uk=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 01.01.2018 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 4828 VIP website status:| Yes...

CVE-2016-4828

The CVE affects WordPress plugin Collne Welcart e-Commerce, prior to version 1.8.3. A vulnerability in session handling lets a remote attacker log in as a user by knowing the user’s e-mail address, granting user-level access and enabling arbitrary operations as described in multiple sources. Reme...

CVE-2015-4828

Unspecified vulnerability in the PeopleSoft Enterprise FSCM component in Oracle PeopleSoft Products 9.2 allows remote authenticated users to affect confidentiality via vectors related to FIN Resource Management Security...

CVE-2015-4828

CVE-2015-4828 describes an unspecified vulnerability in the PeopleSoft Enterprise FSCM component within Oracle PeopleSoft Products 9.2 , allowing remote authenticated users to affect confidentiality via FIN Resource Management (Security) . The description indicates a vulnerability in the FSCM/FIN...

farpost.ru XSS vulnerability

Vulnerable URL: http://www.farpost.ru/job/vacancy/?query=xss+"+onmouseover="alert/XSSposed/ Details: Description| Value ---|--- Patched:| Yes, at 25.09.2016 Latest check for patch:| 25.09.2016 06:59 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4828 Google...

CVE-2014-4828

The CVE-2014-4828 issue affects IBM QRadar SIEM QRM 7.1 MR1 and QRM/QVM 7.2 MR2, where remote attackers can perform clickjacking via a crafted HTTP request. Root cause is improper handling of click actions in the web interface, enabling a malicious site to hijack user clicks. Affected products ar...

CVE-2014-4828

IBM Security QRadar SIEM QRM 7.1 MR1 and QRM/QVM 7.2 MR2 allows remote attackers to conduct clickjacking attacks via a crafted HTTP request...

AutoSec Tools V-CMS inline_image_upload.php PHP File Upload And Execution (CVE-2011-4828)

An arbitrary file upload vulnerability has been reported in AutoSec Tools V-CMS...

[security bulletin] HPSBPI02892 rev.1 - Certain HP FutureSmart MFP, Weak PDF Encryption, Local Disclosure of Information

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03888014 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03888014 Version: 1 HPSBPI02892 rev....

CVE-2013-4828

HP LaserJet M4555, M525, and M725; LaserJet flow MFP M525c; LaserJet Enterprise color flow MFP M575c; Color LaserJet CM4540, M575, and M775; and ScanJet Enterprise 8500fn1 FutureSmart devices do not properly encrypt PDF documents, which allows remote attackers to obtain sensitive information via...

CVE-2011-4828

creationtimestamp| type| source ---|---|--- 2012-04-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18738 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/vcmsupload.rb 2025-02-06 03:13:40+00:00| seen|...